diff options
Diffstat (limited to 'src/tpm2/X509.h')
| -rw-r--r-- | src/tpm2/X509.h | 142 |
1 files changed, 142 insertions, 0 deletions
diff --git a/src/tpm2/X509.h b/src/tpm2/X509.h new file mode 100644 index 0000000..42c46e5 --- /dev/null +++ b/src/tpm2/X509.h @@ -0,0 +1,142 @@ +/********************************************************************************/ +/* */ +/* Macro and Structure Definitions for the X509 Commands and Functions. */ +/* Written by Ken Goldman */ +/* IBM Thomas J. Watson Research Center */ +/* $Id: X509.h 1658 2021-01-22 23:14:01Z kgoldman $ */ +/* */ +/* Licenses and Notices */ +/* */ +/* 1. Copyright Licenses: */ +/* */ +/* - Trusted Computing Group (TCG) grants to the user of the source code in */ +/* this specification (the "Source Code") a worldwide, irrevocable, */ +/* nonexclusive, royalty free, copyright license to reproduce, create */ +/* derivative works, distribute, display and perform the Source Code and */ +/* derivative works thereof, and to grant others the rights granted herein. */ +/* */ +/* - The TCG grants to the user of the other parts of the specification */ +/* (other than the Source Code) the rights to reproduce, distribute, */ +/* display, and perform the specification solely for the purpose of */ +/* developing products based on such documents. */ +/* */ +/* 2. Source Code Distribution Conditions: */ +/* */ +/* - Redistributions of Source Code must retain the above copyright licenses, */ +/* this list of conditions and the following disclaimers. */ +/* */ +/* - Redistributions in binary form must reproduce the above copyright */ +/* licenses, this list of conditions and the following disclaimers in the */ +/* documentation and/or other materials provided with the distribution. */ +/* */ +/* 3. Disclaimers: */ +/* */ +/* - THE COPYRIGHT LICENSES SET FORTH ABOVE DO NOT REPRESENT ANY FORM OF */ +/* LICENSE OR WAIVER, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, WITH */ +/* RESPECT TO PATENT RIGHTS HELD BY TCG MEMBERS (OR OTHER THIRD PARTIES) */ +/* THAT MAY BE NECESSARY TO IMPLEMENT THIS SPECIFICATION OR OTHERWISE. */ +/* Contact TCG Administration (admin@trustedcomputinggroup.org) for */ +/* information on specification licensing rights available through TCG */ +/* membership agreements. */ +/* */ +/* - THIS SPECIFICATION IS PROVIDED "AS IS" WITH NO EXPRESS OR IMPLIED */ +/* WARRANTIES WHATSOEVER, INCLUDING ANY WARRANTY OF MERCHANTABILITY OR */ +/* FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, OR */ +/* NONINFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS, OR ANY WARRANTY */ +/* OTHERWISE ARISING OUT OF ANY PROPOSAL, SPECIFICATION OR SAMPLE. */ +/* */ +/* - Without limitation, TCG and its members and licensors disclaim all */ +/* liability, including liability for infringement of any proprietary */ +/* rights, relating to use of information in this specification and to the */ +/* implementation of this specification, and TCG disclaims all liability for */ +/* cost of procurement of substitute goods or services, lost profits, loss */ +/* of use, loss of data or any incidental, consequential, direct, indirect, */ +/* or special damages, whether under contract, tort, warranty or otherwise, */ +/* arising in any way out of use or reliance upon this specification or any */ +/* information herein. */ +/* */ +/* (c) Copyright IBM Corp. and others, 2019 - 2021 */ +/* */ +/********************************************************************************/ + +// 10.1.16 X509.h +// 10.1.16.1 Introduction +// This file contains the macro and structure definitions for the X509 commands and functions. +#ifndef _X509_H_ +#define _X509_H_ +// 10.1.16.2 Includes +#include "Tpm.h" +#include "TpmAsn1.h" +// 10.1.16.3 Defined Constants +// 10.1.16.3.1 X509 Application-specific types +#define X509_SELECTION 0xA0 +#define X509_ISSUER_UNIQUE_ID 0xA1 +#define X509_SUBJECT_UNIQUE_ID 0xA2 +#define X509_EXTENSIONS 0xA3 +// These defines give the order in which values appear in the TBScertificate of an x.509 +// certificate. These values are used to index into an array of +#define ENCODED_SIZE_REF 0 +#define VERSION_REF (ENCODED_SIZE_REF + 1) +#define SERIAL_NUMBER_REF (VERSION_REF + 1) +#define SIGNATURE_REF (SERIAL_NUMBER_REF + 1) +#define ISSUER_REF (SIGNATURE_REF + 1) +#define VALIDITY_REF (ISSUER_REF + 1) +#define SUBJECT_KEY_REF (VALIDITY_REF + 1) +#define SUBJECT_PUBLIC_KEY_REF (SUBJECT_KEY_REF + 1) +#define EXTENSIONS_REF (SUBJECT_PUBLIC_KEY_REF + 1) +#define REF_COUNT (EXTENSIONS_REF + 1) + +// 10.1.16.4 Structures Used to access the fields of a TBSsignature some of which are in the +// in_CertifyX509 structure and some of which are in the out_CertifyX509 structure. +typedef struct stringRef +{ + BYTE *buf; + INT16 len; +} stringRef; +// This is defined to avoid bit by bit comparisons within a UINT32 +typedef union x509KeyUsageUnion { + TPMA_X509_KEY_USAGE x509; + UINT32 integer; +} x509KeyUsageUnion; + +// 10.1.16.5 Global X509 Constants + +// These values are instanced by X509_spt.c and referenced by other X509-related files. This is the +// DER-encoded value for the Key Usage OID (2.5.29.15). This is the full OID, not just the numeric +// value + +#define OID_KEY_USAGE_EXTENSION_VALUE 0x06, 0x03, 0x55, 0x1D, 0x0F +MAKE_OID(_KEY_USAGE_EXTENSION); + +// This is the DER-encoded value for the TCG-defined TPMA_OBJECT OID (2.23.133.10.1.1.1) + +#define OID_TCG_TPMA_OBJECT_VALUE 0x06, 0x07, 0x67, 0x81, 0x05, 0x0a, 0x01, \ + 0x01, 0x01 +MAKE_OID(_TCG_TPMA_OBJECT); + +#ifdef _X509_SPT_ + +// If a bit is SET in KEY_USAGE_SIGN is also SET in keyUsage then the associated key has to have +// sign SET. + +const x509KeyUsageUnion KEY_USAGE_SIGN = + {TPMA_X509_KEY_USAGE_INITIALIZER( + /* bits_at_0 */ 0, /* decipheronly */ 0, /* encipheronly */ 0, + /* crlsign */ 1, /* keycertsign */ 1, /* keyagreement */ 0, + /* dataencipherment */ 0, /* keyencipherment */ 0, /* nonrepudiation */ 0, + /* digitalsignature */ 1)}; + +// If a bit is SET in KEY_USAGE_DECRYPT is also SET in keyUsage then the associated key has to have decrypt SET. + +const x509KeyUsageUnion KEY_USAGE_DECRYPT = + {TPMA_X509_KEY_USAGE_INITIALIZER( + /* bits_at_0 */ 0, /* decipheronly */ 1, /* encipheronly */ 1, + /* crlsign */ 0, /* keycertsign */ 0, /* keyagreement */ 1, + /* dataencipherment */ 1, /* keyencipherment */ 1, /* nonrepudiation */ 0, + /* digitalsignature */ 0)}; +#else +extern x509KeyUsageUnion KEY_USAGE_SIGN; +extern x509KeyUsageUnion KEY_USAGE_DECRYPT; +#endif + +#endif // _X509_H_ |